Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: igUHudV2PKM1ln9DhFeF6gIrNgJATnqMQShNSkCkz3A=
Subject key identifier: D5:B8:17:46:E6:24:99:75:E8:81:8A:CC:00:CF:3A:C8:47:8E:31:28
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019CAB6B90BBCDBB0943C4AC292FBCF8BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0FC1
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: boU8Nt/MzyzkSZIKXNT6FAHx4a7IXaSH3ditfGpf1yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:90:bb:cd:bb:09:43:c4:ac:29:2f:bc:f8:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=d5b81746e6249975e8818acc00cf3ac8478e3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:56:cf:e7:8c:7d:a5:5b:75:7b:73:0b:eb:
bf:48:98:22:7c:b2:23:2c:46:01:87:6f:33:39:58:
ee:65:3e:fb:45:b0:25:8f:31:06:e1:f2:7d:dc:dd:
0b:b9:cf:01:4b:2e:88:e4:e3:ba:7a:d4:8b:f2:a1:
b7:dc:63:3f:42:0c:1d:5e:d5:a4:a8:1d:a3:aa:07:
b4:d1:57:09:84:8f:a3:4a:b7:34:60:f0:9f:4c:35:
f3:5d:21:08:c2:c2:73:62:6e:da:4e:3e:00:35:79:
c0:77:b4:ef:70:50:92:06:11:bc:74:0b:12:92:55:
43:7f:e4:94:dd:53:ac:50:f9:34:9b:a5:99:ff:3d:
1c:97:cd:8c:47:8c:9b:e7:cb:4b:c3:c9:fc:ba:09:
de:c1:b4:42:d6:5d:97:81:4a:76:ba:6e:2b:a1:81:
d2:a7:d6:2d:38:62:4f:d5:1b:4c:a9:87:5e:6a:c5:
50:77:b8:f1:60:38:0b:c2:0e:dc:19:cd:cc:a4:af:
fc:90:2d:14:0a:b2:c6:fa:b5:4d:31:1e:55:dc:3d:
c4:10:99:35:0e:bb:92:dd:5c:5c:a0:7b:e9:33:06:
46:98:9b:59:c0:d5:25:df:ce:f6:81:40:d5:03:de:
29:23:2d:b3:63:b9:0b:30:2e:91:ef:19:d3:4f:47:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:17:46:E6:24:99:75:E8:81:8A:CC:00:CF:3A:C8:47:8E:31:28
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:dc:e6:7b:34:ff:fc:5f:43:94:8f:77:77:f8:29:3f:fd:
5a:7f:2f:92:cf:05:b8:0d:b1:5d:fb:54:31:55:df:f1:af:5f:
1d:e1:d3:cc:b0:bf:27:80:c0:02:35:53:bd:af:37:6e:f9:bb:
24:0b:c2:30:26:d0:c5:8b:bd:fc:49:ab:d9:17:ff:bf:19:a3:
ff:a0:49:44:33:2a:8a:94:aa:08:2e:2f:df:cc:e0:2a:6e:65:
ed:1b:ab:61:ef:4c:e8:1a:92:ce:3d:48:db:9b:ff:6d:8e:97:
48:66:44:89:f5:a4:17:02:52:5d:d3:89:14:38:50:5b:fa:b1:
7e:98:6a:09:d3:10:78:7a:c0:55:5d:7b:f2:ea:c0:15:82:28:
0e:44:3c:e1:e3:93:40:dd:a6:f1:fb:8b:b7:43:77:e2:5e:26:
14:83:b4:61:c6:65:e6:1e:e5:70:93:a2:c8:8e:9f:c6:48:16:
ae:cd:2f:10:c0:86:66:74:2e:5e:6c:44:f4:e6:8b:2e:85:c9:
45:c6:70:4c:4a:d1:12:ec:69:34:c8:30:9a:5a:e5:37:4a:02:
96:de:c1:5a:a9:71:eb:37:71:61:2c:6e:fd:46:bf:97:eb:eb:
db:1b:23:6f:a4:39:ae:fe:40:94:f4:6a:f1:d4:9c:d4:e2:ec:
cf:30:21:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:36 2026 by rpki-client